Initial release: Miracast Enabler KernelSU module v1.0.0

Enables Wi-Fi Display (Miracast) on Pixel phones where Google
disabled it in software. Uses fabricated overlays, system properties,
and sysconfig XML. Includes WebUI for KernelSU manager.

Tested hardware: Pixel 10 Pro Fold (rango), Tensor G5, BCM4390.

build.sh

@@ -0,0 +1,111 @@
+#!/bin/bash
+# Build Miracast Enabler KernelSU/Magisk module zip
+#
+# The module uses fabricated overlays at runtime (no APK needed).
+# If you have a local aapt2 binary (e.g. pulled from the phone),
+# set AAPT2=/path/to/aapt2 and FRAMEWORK_RES=/path/to/framework-res.apk
+# to also build an RRO APK as a fallback for pre-Android 12 devices.
+set -e
+
+cd "$(dirname "$0")"
+
+MODULE_ZIP="miracast-enabler-v1.0.0.zip"
+
+echo "=== Miracast Enabler Build ==="
+echo ""
+
+# Optional: build RRO APK if tools are available
+AAPT2="${AAPT2:-tools/aapt2}"
+FRAMEWORK_RES="${FRAMEWORK_RES:-tools/framework-res.apk}"
+
+if [ -x "$AAPT2" ] && [ -f "$FRAMEWORK_RES" ]; then
+    echo "[1/3] Building RRO overlay APK..."
+
+    OVERLAY_DIR="overlay"
+    rm -rf "$OVERLAY_DIR/build"
+    mkdir -p "$OVERLAY_DIR/build"
+
+    "$AAPT2" compile \
+        --dir "$OVERLAY_DIR/res" \
+        -o "$OVERLAY_DIR/build/compiled.zip"
+
+    "$AAPT2" link \
+        --manifest "$OVERLAY_DIR/AndroidManifest.xml" \
+        -I "$FRAMEWORK_RES" \
+        -o "$OVERLAY_DIR/build/MiracastEnablerOverlay.apk" \
+        "$OVERLAY_DIR/build/compiled.zip"
+
+    # Sign if possible
+    KEYSTORE="build-key.jks"
+    KEY_ALIAS="miracast"
+    KEY_PASS="miracast-build"
+
+    if ! [ -f "$KEYSTORE" ] && command -v keytool >/dev/null 2>&1; then
+        keytool -genkeypair \
+            -keystore "$KEYSTORE" \
+            -alias "$KEY_ALIAS" \
+            -keyalg RSA -keysize 2048 -validity 10000 \
+            -storepass "$KEY_PASS" -keypass "$KEY_PASS" \
+            -dname "CN=Miracast Enabler,O=Module,C=US"
+    fi
+
+    if [ -f "$KEYSTORE" ]; then
+        if command -v apksigner >/dev/null 2>&1; then
+            apksigner sign \
+                --ks "$KEYSTORE" --ks-key-alias "$KEY_ALIAS" \
+                --ks-pass "pass:$KEY_PASS" --key-pass "pass:$KEY_PASS" \
+                --out "$OVERLAY_DIR/MiracastEnablerOverlay.apk" \
+                "$OVERLAY_DIR/build/MiracastEnablerOverlay.apk"
+        elif command -v jarsigner >/dev/null 2>&1; then
+            cp "$OVERLAY_DIR/build/MiracastEnablerOverlay.apk" "$OVERLAY_DIR/MiracastEnablerOverlay.apk"
+            jarsigner -keystore "$KEYSTORE" \
+                -storepass "$KEY_PASS" -keypass "$KEY_PASS" \
+                "$OVERLAY_DIR/MiracastEnablerOverlay.apk" "$KEY_ALIAS"
+        else
+            cp "$OVERLAY_DIR/build/MiracastEnablerOverlay.apk" "$OVERLAY_DIR/MiracastEnablerOverlay.apk"
+        fi
+    else
+        cp "$OVERLAY_DIR/build/MiracastEnablerOverlay.apk" "$OVERLAY_DIR/MiracastEnablerOverlay.apk"
+    fi
+
+    mkdir -p system/vendor/overlay
+    cp "$OVERLAY_DIR/MiracastEnablerOverlay.apk" system/vendor/overlay/
+    echo "   RRO APK built: $(du -h system/vendor/overlay/MiracastEnablerOverlay.apk | cut -f1)"
+    rm -rf "$OVERLAY_DIR/build"
+else
+    echo "[1/3] Skipping RRO APK (no local aapt2 or framework-res.apk)"
+    echo "   Module will use fabricated overlays on Android 12+"
+    echo "   To build APK: pull aapt2 from phone with ./pull-aapt2.sh"
+    rm -rf system/vendor/overlay
+fi
+
+echo "[2/3] Packaging module..."
+rm -f "$MODULE_ZIP"
+
+# Build file list
+FILES=(
+    module.prop
+    customize.sh
+    post-fs-data.sh
+    service.sh
+    system.prop
+    system/
+    webroot/
+)
+
+# Include overlay source for on-device build fallback
+FILES+=(overlay/AndroidManifest.xml overlay/res/)
+
+# Include pre-built APK if it exists
+if [ -f "system/vendor/overlay/MiracastEnablerOverlay.apk" ]; then
+    FILES+=(system/vendor/overlay/MiracastEnablerOverlay.apk)
+fi
+
+zip -r9 "$MODULE_ZIP" "${FILES[@]}" \
+    -x "overlay/build/*" "*.git*" "build.sh" "build-key.jks" \
+    "pull-aapt2.sh" "tools/*" "README*"
+
+echo "[3/3] Done"
+echo ""
+echo "=== $MODULE_ZIP ($(du -h "$MODULE_ZIP" | cut -f1)) ==="
+echo "Flash via KernelSU or Magisk manager"

customize.sh

@@ -0,0 +1,118 @@
+#!/system/bin/sh
+# Miracast Enabler - Installation Script
+
+SKIPUNZIP=0
+
+ui_print "================================================"
+ui_print " Miracast Enabler v1.0.0"
+ui_print "================================================"
+ui_print ""
+
+# Detect device
+DEVICE=$(getprop ro.product.device)
+MODEL=$(getprop ro.product.model)
+SOC=$(getprop ro.soc.model)
+ANDROID=$(getprop ro.build.version.release)
+API=$(getprop ro.build.version.sdk)
+
+ui_print "- Device: $MODEL ($DEVICE)"
+ui_print "- SoC: $SOC"
+ui_print "- Android: $ANDROID (API $API)"
+ui_print ""
+
+# Pixel detection
+case "$DEVICE" in
+    rango|comet|cometl|caiman|komodo|tokay|blazer|husky|shiba|felix|tangorpro|lynx|panther|cheetah|oriole|raven|bluejay)
+        ui_print "- Pixel device detected"
+        ;;
+    *)
+        ui_print "! Non-Pixel device — module may still work"
+        ;;
+esac
+
+# Foldable messaging
+case "$DEVICE" in
+    rango|comet|cometl|felix)
+        ui_print "- Foldable detected: inner display is default Miracast source"
+        ui_print "- Change display source via WebUI in KernelSU manager"
+        ;;
+esac
+ui_print ""
+
+# --- Build RRO APK on-device as fallback for pre-Android 12 ---
+# Android 12+ uses fabricated overlays (no APK needed)
+# Pre-Android 12 needs a real RRO APK, built right here on the phone
+if [ "$API" -lt 31 ]; then
+    ui_print "- Android < 12: building RRO overlay APK on-device..."
+
+    AAPT2=$(which aapt2 2>/dev/null)
+    if [ -z "$AAPT2" ]; then
+        # aapt2 is typically in the build-tools or framework
+        for candidate in \
+            /system/bin/aapt2 \
+            /system/xbin/aapt2 \
+            /data/adb/aapt2; do
+            if [ -x "$candidate" ]; then
+                AAPT2="$candidate"
+                break
+            fi
+        done
+    fi
+
+    if [ -n "$AAPT2" ] && [ -x "$AAPT2" ]; then
+        ui_print "- Found aapt2: $AAPT2"
+        OVERLAY_BUILD="$MODPATH/overlay_build"
+        mkdir -p "$OVERLAY_BUILD"
+
+        # Compile resources
+        "$AAPT2" compile \
+            --dir "$MODPATH/overlay/res" \
+            -o "$OVERLAY_BUILD/compiled.zip" 2>/dev/null
+
+        if [ $? -eq 0 ]; then
+            # Link into APK
+            "$AAPT2" link \
+                --manifest "$MODPATH/overlay/AndroidManifest.xml" \
+                -I /system/framework/framework-res.apk \
+                -o "$OVERLAY_BUILD/overlay.apk" \
+                "$OVERLAY_BUILD/compiled.zip" 2>/dev/null
+
+            if [ $? -eq 0 ]; then
+                mkdir -p "$MODPATH/system/vendor/overlay"
+                cp "$OVERLAY_BUILD/overlay.apk" "$MODPATH/system/vendor/overlay/MiracastEnablerOverlay.apk"
+                chmod 644 "$MODPATH/system/vendor/overlay/MiracastEnablerOverlay.apk"
+                ui_print "- RRO overlay APK built and installed"
+            else
+                ui_print "! aapt2 link failed — overlay APK not built"
+            fi
+        else
+            ui_print "! aapt2 compile failed — overlay APK not built"
+        fi
+        rm -rf "$OVERLAY_BUILD"
+    else
+        ui_print "! aapt2 not found on device"
+        ui_print "! Pre-Android 12 will rely on system properties only"
+    fi
+else
+    ui_print "- Android 12+: will use fabricated overlays (no APK needed)"
+fi
+
+ui_print ""
+ui_print "- Setting permissions..."
+
+set_perm_recursive $MODPATH 0 0 0755 0644
+set_perm $MODPATH/post-fs-data.sh 0 0 0755
+set_perm $MODPATH/service.sh 0 0 0755
+set_perm_recursive $MODPATH/system/etc 0 0 0755 0644
+
+if [ -f "$MODPATH/system/vendor/overlay/MiracastEnablerOverlay.apk" ]; then
+    set_perm "$MODPATH/system/vendor/overlay/MiracastEnablerOverlay.apk" 0 0 0644
+fi
+
+ui_print ""
+ui_print "- Installation complete!"
+ui_print "- Reboot to activate Miracast"
+ui_print "- After reboot: Settings > Connected devices >"
+ui_print "  Connection preferences > Cast"
+ui_print "- WebUI available in KernelSU manager"
+ui_print ""

module.prop

@@ -0,0 +1,6 @@
+id=miracast-enabler
+name=Miracast Enabler
+version=v1.0.0
+versionCode=1
+author=snake
+description=Enables Miracast (Wi-Fi Display) on Pixel phones and other devices where it is disabled by default

overlay/AndroidManifest.xml

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    package="com.miracast.enabler.overlay">
+
+    <overlay
+        android:targetPackage="android"
+        android:targetName="MiracastConfig"
+        android:isStatic="true"
+        android:priority="999" />
+
+</manifest>

overlay/res/values/config.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <!-- Enable Wi-Fi Display (Miracast) in the framework -->
+    <bool name="config_enableWifiDisplay">true</bool>
+
+    <!-- Allow protected (DRM/HDCP) content over wireless display -->
+    <bool name="config_wifiDisplaySupportsProtectedBuffers">true</bool>
+</resources>

post-fs-data.sh

@@ -0,0 +1,21 @@
+#!/system/bin/sh
+# Miracast Enabler - post-fs-data
+# Runs early in boot before most services start
+
+MODDIR=${0%/*}
+
+# Core Wi-Fi Display props
+resetprop persist.debug.wfd.enable 1
+resetprop persist.sys.wfd.virtual 0
+
+# HDCP — disable by default for maximum compatibility
+resetprop persist.sys.wfd.nohdcp 1
+resetprop wlan.wfd.hdcp disable
+
+# Tensor / Pixel: force GPU composition for virtual displays
+# HWC on Tensor chips does not correctly handle virtual display layers,
+# which causes black screen or green artifacts during Miracast
+resetprop debug.sf.enable_hwc_vds 0
+
+# Wi-Fi Direct concurrency — needed on Pixel to allow P2P alongside STA
+resetprop wifi.direct.interface p2p-dev-wlan0

pull-aapt2.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+# Pull aapt2 from a connected Android device for local builds
+# Usage: ./pull-aapt2.sh
+set -e
+
+DEST="tools/aapt2"
+
+if ! adb get-state >/dev/null 2>&1; then
+    echo "ERROR: No device connected via ADB"
+    exit 1
+fi
+
+echo "Searching for aapt2 on device..."
+
+# Find aapt2 binary on the device
+DEVICE_PATH=$(adb shell "find /system /vendor /apex -name 'aapt2' -type f 2>/dev/null" | tr -d '\r' | head -1)
+
+if [ -z "$DEVICE_PATH" ]; then
+    echo "aapt2 not found as standalone binary, checking APEX modules..."
+    # On newer Android, build tools live inside APEX
+    DEVICE_PATH=$(adb shell "find /apex/com.android.sdkext /apex/com.android.art -name 'aapt2' 2>/dev/null" | tr -d '\r' | head -1)
+fi
+
+if [ -z "$DEVICE_PATH" ]; then
+    echo "aapt2 not found on device."
+    echo "Trying framework-res.apk instead (for on-device overlay builds)..."
+    DEVICE_PATH="/system/framework/framework-res.apk"
+    DEST="tools/framework-res.apk"
+fi
+
+echo "Pulling: $DEVICE_PATH"
+mkdir -p "$(dirname "$DEST")"
+adb pull "$DEVICE_PATH" "$DEST"
+
+if [ -f "$DEST" ]; then
+    chmod +x "$DEST" 2>/dev/null
+    echo "Saved to: $DEST"
+    file "$DEST"
+
+    if [[ "$DEST" == *aapt2 ]]; then
+        VERSION=$("./$DEST" version 2>&1 || true)
+        echo "Version: $VERSION"
+    fi
+fi

service.sh

@@ -0,0 +1,174 @@
+#!/system/bin/sh
+# Miracast Enabler - late service
+# Runs after boot is completed
+
+MODDIR=${0%/*}
+LOGFILE="$MODDIR/miracast.log"
+
+mlog() {
+    echo "$(date '+%Y-%m-%d %H:%M:%S') $1" >> "$LOGFILE"
+    log -t MiracastEnabler "$1"
+}
+
+# Truncate log on each boot
+echo "" > "$LOGFILE"
+mlog "Waiting for boot..."
+
+# Wait for boot to complete
+while [ "$(getprop sys.boot_completed)" != "1" ]; do
+    sleep 1
+done
+sleep 3
+
+mlog "Boot complete, applying Miracast configuration"
+
+# --- Core WFD properties ---
+# Some vendors reset these during boot, so re-apply
+resetprop persist.debug.wfd.enable 1
+resetprop persist.sys.wfd.virtual 0
+resetprop persist.sys.wfd.nohdcp 1
+resetprop wlan.wfd.hdcp disable
+
+# Tensor / Pixel: force GPU composition for virtual display surfaces
+# PowerVR (G5) and Mali (G4 and earlier) HWC implementations don't
+# handle virtual display layers for Miracast, causing black/green frames
+resetprop debug.sf.enable_hwc_vds 0
+
+# Wi-Fi Direct concurrency — needed on Pixel to allow P2P alongside STA
+resetprop wifi.direct.interface p2p-dev-wlan0
+
+# --- Device detection ---
+DEVICE=$(getprop ro.product.device)
+SOC=$(getprop ro.soc.model)
+PLATFORM=$(getprop ro.board.platform)
+API=$(getprop ro.build.version.sdk)
+GPU=$(getprop ro.hardware.egl)
+
+mlog "Device=$DEVICE SoC=$SOC Platform=$PLATFORM API=$API GPU=$GPU"
+
+# --- Tensor SoC family tweaks ---
+case "$SOC" in
+    Tensor*)
+        # High GO intent so Pixel acts as Group Owner in P2P negotiation
+        # This ensures the Pixel controls the channel and timing
+        resetprop wifi.direct.go_intent 15
+        mlog "Tensor SoC: set P2P GO intent=15"
+        ;;
+esac
+
+# --- Pixel 10 Pro Fold (rango) — Tensor G5, Broadcom BCM4390 ---
+# Confirmed: codename=rango, platform=laguna, gpu=powervr, wifi=bcmdhd4390
+# Display IDs: 0 (inner), 3 (outer)
+# Wi-Fi features include WFD_R2 — hardware fully supports Miracast
+case "$DEVICE" in
+    rango)
+        mlog "Pixel 10 Pro Fold (rango) detected"
+
+        # Inner display (ID 0) as default Miracast source
+        if [ -z "$(getprop persist.sys.wfd.display_id)" ]; then
+            resetprop persist.sys.wfd.display_id 0
+        fi
+        # Default 1080p30 — the inner panel is 2076x2152 which is too wide
+        # for most Miracast receivers; 1080p is the safe maximum
+        if [ -z "$(getprop persist.sys.wfd.resolution)" ]; then
+            resetprop persist.sys.wfd.resolution 7
+        fi
+
+        # Tensor G5 / laguna platform: PowerVR GPU composition
+        resetprop debug.sf.enable_hwc_vds 0
+
+        # BCM4390 Wi-Fi: P2P supplicant already supports VHT and DFS
+        # channels (p2p_go_vht=1, p2p_dfs_chan_enable=1 in vendor config)
+        # but 6GHz is disabled for P2P (p2p_6ghz_disable=1), which is fine
+        # since most Miracast receivers don't support 6GHz
+
+        # Force single-channel concurrency to prevent the BCM4390 from
+        # splitting STA and P2P across bands which can cause latency spikes
+        resetprop persist.vendor.wifi.wfd.scc 1
+
+        mlog "rango: inner display=0, outer display=3, wifi=BCM4390, gpu=PowerVR"
+        ;;
+esac
+
+# --- Pixel 9 Pro Fold (comet/cometl) — Tensor G4 ---
+case "$DEVICE" in
+    comet|cometl)
+        mlog "Pixel 9 Pro Fold detected"
+        if [ -z "$(getprop persist.sys.wfd.display_id)" ]; then
+            resetprop persist.sys.wfd.display_id 0
+        fi
+        if [ -z "$(getprop persist.sys.wfd.resolution)" ]; then
+            resetprop persist.sys.wfd.resolution 7
+        fi
+        ;;
+esac
+
+# --- Original Pixel Fold (felix) — Tensor G2 ---
+case "$DEVICE" in
+    felix)
+        mlog "Pixel Fold (1st gen) detected"
+        if [ -z "$(getprop persist.sys.wfd.display_id)" ]; then
+            resetprop persist.sys.wfd.display_id 0
+        fi
+        if [ -z "$(getprop persist.sys.wfd.resolution)" ]; then
+            resetprop persist.sys.wfd.resolution 7
+        fi
+        ;;
+esac
+
+# --- Pixel 9 series (non-fold) — Tensor G4 ---
+case "$DEVICE" in
+    caiman|komodo|tokay|blazer)
+        mlog "Pixel 9 series detected ($DEVICE)"
+        # No foldable display concerns, standard single display
+        ;;
+esac
+
+# --- Pixel 10 series (non-fold) ---
+# Platform "laguna" is Tensor G5; other Pixel 10 variants share it
+case "$PLATFORM" in
+    laguna)
+        if [ "$DEVICE" != "rango" ]; then
+            mlog "Tensor G5 device ($DEVICE) on laguna platform"
+            resetprop debug.sf.enable_hwc_vds 0
+            resetprop persist.vendor.wifi.wfd.scc 1
+        fi
+        ;;
+esac
+
+# --- Fabricated overlay (Android 12+, API 31+) ---
+# Primary method to flip config_enableWifiDisplay in the framework
+# No APK compilation needed — fabricated overlays are created at runtime
+# Requires root, which KernelSU provides
+if [ "$API" -ge 31 ]; then
+    mlog "API $API >= 31, creating fabricated overlays"
+
+    # TYPE_INT_BOOLEAN = 0x12, true = 0xFFFFFFFF
+    cmd overlay fabricate --target android --name MiracastEnablerWifiDisplay \
+        android:bool/config_enableWifiDisplay 0x12 0xFFFFFFFF 2>/dev/null
+    RET1=$?
+
+    cmd overlay fabricate --target android --name MiracastEnablerProtectedBuffers \
+        android:bool/config_wifiDisplaySupportsProtectedBuffers 0x12 0xFFFFFFFF 2>/dev/null
+    RET2=$?
+
+    # Enable the fabricated overlays
+    cmd overlay enable --user current com.android.shell:MiracastEnablerWifiDisplay 2>/dev/null
+    cmd overlay enable --user current com.android.shell:MiracastEnablerProtectedBuffers 2>/dev/null
+
+    # Verify and log
+    WFD_STATE=$(cmd overlay list 2>/dev/null | grep MiracastEnabler)
+    mlog "Fabricate WifiDisplay ret=$RET1, ProtectedBuffers ret=$RET2"
+    mlog "Overlay state: $WFD_STATE"
+else
+    mlog "API $API < 31, fabricated overlays not available"
+    mlog "Relying on system properties and sysconfig XML only"
+fi
+
+# --- Fallback: enable pre-installed RRO APK if present ---
+if [ -f "$MODDIR/system/vendor/overlay/MiracastEnablerOverlay.apk" ]; then
+    cmd overlay enable --user current com.miracast.enabler.overlay 2>/dev/null
+    mlog "Enabled RRO APK overlay"
+fi
+
+mlog "Miracast enabler service complete"

system.prop

@@ -0,0 +1,11 @@
+# Core Miracast / Wi-Fi Display
+persist.debug.wfd.enable=1
+persist.sys.wfd.virtual=0
+persist.sys.wfd.nohdcp=1
+wlan.wfd.hdcp=disable
+
+# Tensor / Pixel: GPU composition for virtual displays
+debug.sf.enable_hwc_vds=0
+
+# Wi-Fi Direct concurrency
+wifi.direct.interface=p2p-dev-wlan0

system/etc/permissions/miracast-enabler.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Declare Wi-Fi Display hardware/software features -->
+<permissions>
+    <feature name="android.hardware.wifi.direct" />
+    <feature name="android.software.wifi_display" />
+</permissions>

system/etc/sysconfig/miracast-enabler.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Enable Wi-Fi Display (Miracast) feature -->
+<config>
+    <feature name="android.hardware.wifi.direct" />
+    <feature name="android.software.wifi_display" />
+</config>

webroot/index.html

@@ -0,0 +1,643 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Miracast Enabler</title>
+    <style>
+        :root {
+            --bg: #121212;
+            --surface: #1e1e1e;
+            --surface2: #2a2a2a;
+            --primary: #bb86fc;
+            --primary-dim: #9965d6;
+            --on-surface: #e0e0e0;
+            --on-surface-dim: #888;
+            --success: #4caf50;
+            --warning: #ff9800;
+            --error: #f44336;
+            --radius: 12px;
+        }
+
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+            background: var(--bg);
+            color: var(--on-surface);
+            min-height: 100vh;
+            padding: 16px;
+            -webkit-font-smoothing: antialiased;
+        }
+
+        .header {
+            text-align: center;
+            padding: 24px 0 16px;
+        }
+        .header h1 {
+            font-size: 22px;
+            font-weight: 600;
+            color: var(--primary);
+        }
+        .header .version {
+            font-size: 12px;
+            color: var(--on-surface-dim);
+            margin-top: 4px;
+        }
+
+        .status-banner {
+            display: flex;
+            align-items: center;
+            gap: 10px;
+            padding: 14px 16px;
+            border-radius: var(--radius);
+            margin-bottom: 20px;
+            font-size: 14px;
+            font-weight: 500;
+        }
+        .status-banner.active {
+            background: rgba(76, 175, 80, 0.15);
+            color: var(--success);
+        }
+        .status-banner.inactive {
+            background: rgba(244, 67, 54, 0.15);
+            color: var(--error);
+        }
+        .status-banner.loading {
+            background: rgba(255, 152, 0, 0.15);
+            color: var(--warning);
+        }
+        .status-dot {
+            width: 10px;
+            height: 10px;
+            border-radius: 50%;
+            background: currentColor;
+            flex-shrink: 0;
+        }
+
+        .card {
+            background: var(--surface);
+            border-radius: var(--radius);
+            padding: 16px;
+            margin-bottom: 12px;
+        }
+        .card-title {
+            font-size: 13px;
+            font-weight: 600;
+            text-transform: uppercase;
+            letter-spacing: 0.5px;
+            color: var(--primary);
+            margin-bottom: 12px;
+        }
+
+        .setting-row {
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            padding: 12px 0;
+            border-bottom: 1px solid var(--surface2);
+        }
+        .setting-row:last-child { border-bottom: none; }
+        .setting-label {
+            font-size: 15px;
+            font-weight: 500;
+        }
+        .setting-desc {
+            font-size: 12px;
+            color: var(--on-surface-dim);
+            margin-top: 2px;
+        }
+
+        .toggle {
+            position: relative;
+            width: 48px;
+            height: 26px;
+            flex-shrink: 0;
+        }
+        .toggle input {
+            opacity: 0;
+            width: 0;
+            height: 0;
+        }
+        .toggle .slider {
+            position: absolute;
+            inset: 0;
+            background: var(--surface2);
+            border-radius: 13px;
+            cursor: pointer;
+            transition: background 0.2s;
+        }
+        .toggle .slider::before {
+            content: "";
+            position: absolute;
+            width: 20px;
+            height: 20px;
+            left: 3px;
+            bottom: 3px;
+            background: var(--on-surface-dim);
+            border-radius: 50%;
+            transition: transform 0.2s, background 0.2s;
+        }
+        .toggle input:checked + .slider {
+            background: var(--primary-dim);
+        }
+        .toggle input:checked + .slider::before {
+            transform: translateX(22px);
+            background: var(--primary);
+        }
+
+        select.setting-select {
+            background: var(--surface2);
+            color: var(--on-surface);
+            border: none;
+            border-radius: 8px;
+            padding: 8px 12px;
+            font-size: 14px;
+            outline: none;
+            cursor: pointer;
+            flex-shrink: 0;
+        }
+
+        .info-grid {
+            display: grid;
+            grid-template-columns: 1fr 1fr;
+            gap: 8px;
+        }
+        .info-item {
+            background: var(--surface2);
+            border-radius: 8px;
+            padding: 10px 12px;
+        }
+        .info-item .label {
+            font-size: 11px;
+            color: var(--on-surface-dim);
+            text-transform: uppercase;
+            letter-spacing: 0.3px;
+        }
+        .info-item .value {
+            font-size: 14px;
+            font-weight: 500;
+            margin-top: 2px;
+            word-break: break-all;
+        }
+
+        .log-area {
+            background: var(--surface2);
+            border-radius: 8px;
+            padding: 12px;
+            font-family: "Cascadia Code", "Fira Code", monospace;
+            font-size: 12px;
+            line-height: 1.6;
+            max-height: 200px;
+            overflow-y: auto;
+            color: var(--on-surface-dim);
+            white-space: pre-wrap;
+            word-break: break-all;
+        }
+
+        .btn {
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            gap: 6px;
+            padding: 10px 20px;
+            border: none;
+            border-radius: 8px;
+            font-size: 14px;
+            font-weight: 500;
+            cursor: pointer;
+            transition: opacity 0.2s;
+            width: 100%;
+            margin-top: 8px;
+        }
+        .btn:active { opacity: 0.7; }
+        .btn-primary {
+            background: var(--primary);
+            color: #000;
+        }
+        .btn-secondary {
+            background: var(--surface2);
+            color: var(--on-surface);
+        }
+    </style>
+</head>
+<body>
+    <div class="header">
+        <h1>Miracast Enabler</h1>
+        <div class="version">v1.0.0</div>
+    </div>
+
+    <div id="statusBanner" class="status-banner loading">
+        <div class="status-dot"></div>
+        <span id="statusText">Reading device state...</span>
+    </div>
+
+    <!-- Core Toggles -->
+    <div class="card">
+        <div class="card-title">Miracast</div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Wi-Fi Display</div>
+                <div class="setting-desc">Master toggle for Miracast</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleWfd" onchange="setProp('persist.debug.wfd.enable', this.checked ? '1' : '0')">
+                <span class="slider"></span>
+            </label>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Disable HDCP</div>
+                <div class="setting-desc">Skip DRM handshake (fixes many receivers)</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleHdcp" onchange="setProp('persist.sys.wfd.nohdcp', this.checked ? '1' : '0')">
+                <span class="slider"></span>
+            </label>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Virtual Display</div>
+                <div class="setting-desc">Use virtual display instead of overlay</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleVirtual" onchange="setProp('persist.sys.wfd.virtual', this.checked ? '1' : '0')">
+                <span class="slider"></span>
+            </label>
+        </div>
+    </div>
+
+    <!-- Resolution & Codec -->
+    <div class="card">
+        <div class="card-title">Quality</div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Max Resolution</div>
+                <div class="setting-desc">Caps output resolution for stability</div>
+            </div>
+            <select class="setting-select" id="selectResolution" onchange="setProp('persist.sys.wfd.resolution', this.value)">
+                <option value="0">Auto</option>
+                <option value="7">1920x1080 (30Hz)</option>
+                <option value="28">1920x1080 (60Hz)</option>
+                <option value="6">1280x720 (30Hz)</option>
+                <option value="27">1280x720 (60Hz)</option>
+                <option value="5">800x480 (30Hz)</option>
+            </select>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">WLAN HDCP</div>
+                <div class="setting-desc">Wi-Fi level HDCP control</div>
+            </div>
+            <select class="setting-select" id="selectWlanHdcp" onchange="setProp('wlan.wfd.hdcp', this.value)">
+                <option value="disable">Disabled</option>
+                <option value="enable">Enabled</option>
+            </select>
+        </div>
+    </div>
+
+    <!-- Pixel-Specific -->
+    <div class="card">
+        <div class="card-title">Pixel / Tensor Tweaks</div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Force P2P Concurrency</div>
+                <div class="setting-desc">Allow Wi-Fi Direct alongside station mode</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleP2p" onchange="setProp('wifi.direct.interface', this.checked ? 'p2p-dev-wlan0' : '')">
+                <span class="slider"></span>
+            </label>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Force Display Composition</div>
+                <div class="setting-desc">Use GPU composition for wireless display</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleComposition" onchange="setProp('debug.sf.enable_hwc_vds', this.checked ? '0' : '1')">
+                <span class="slider"></span>
+            </label>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Fold Display Source</div>
+                <div class="setting-desc">Which display to mirror on foldables</div>
+            </div>
+            <select class="setting-select" id="selectFoldDisplay" onchange="setFoldDisplay(this.value)">
+                <option value="default">Active Display</option>
+                <option value="inner">Inner Display</option>
+                <option value="outer">Outer Display</option>
+            </select>
+        </div>
+    </div>
+
+    <!-- Framework Overlay -->
+    <div class="card">
+        <div class="card-title">Framework Overlay</div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">config_enableWifiDisplay</div>
+                <div class="setting-desc">Framework feature flag (fabricated overlay)</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleOverlayWfd" onchange="setFabricatedOverlay('MiracastEnablerWifiDisplay', 'config_enableWifiDisplay', this.checked)">
+                <span class="slider"></span>
+            </label>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">config_wifiDisplaySupportsProtectedBuffers</div>
+                <div class="setting-desc">Allow DRM content over wireless display</div>
+            </div>
+            <label class="toggle">
+                <input type="checkbox" id="toggleOverlayProtected" onchange="setFabricatedOverlay('MiracastEnablerProtectedBuffers', 'config_wifiDisplaySupportsProtectedBuffers', this.checked)">
+                <span class="slider"></span>
+            </label>
+        </div>
+
+        <div class="setting-row">
+            <div>
+                <div class="setting-label">Overlay Status</div>
+                <div class="setting-desc" id="overlayStatusDesc">Checking...</div>
+            </div>
+            <button class="btn btn-secondary" style="width:auto;margin:0;padding:6px 14px" onclick="reapplyOverlays()">Re-apply</button>
+        </div>
+    </div>
+
+    <!-- Device Info -->
+    <div class="card">
+        <div class="card-title">Device Info</div>
+        <div class="info-grid">
+            <div class="info-item">
+                <div class="label">Device</div>
+                <div class="value" id="infoDevice">—</div>
+            </div>
+            <div class="info-item">
+                <div class="label">SoC</div>
+                <div class="value" id="infoSoc">—</div>
+            </div>
+            <div class="info-item">
+                <div class="label">Android</div>
+                <div class="value" id="infoAndroid">—</div>
+            </div>
+            <div class="info-item">
+                <div class="label">Wi-Fi Chip</div>
+                <div class="value" id="infoWifi">—</div>
+            </div>
+        </div>
+    </div>
+
+    <!-- Log -->
+    <div class="card">
+        <div class="card-title">Log</div>
+        <div class="log-area" id="logArea">Initializing...</div>
+        <div style="display:flex;gap:8px">
+            <button class="btn btn-secondary" style="flex:1" onclick="refreshAll()">Refresh Status</button>
+            <button class="btn btn-secondary" style="flex:1" onclick="showModuleLog()">Module Log</button>
+        </div>
+    </div>
+
+    <script>
+        // KernelSU WebUI shell execution wrapper
+        function exec(cmd) {
+            return new Promise((resolve, reject) => {
+                const callbackName = 'exec_cb_' + Date.now() + '_' + Math.random().toString(36).slice(2);
+                window[callbackName] = (errno, stdout, stderr) => {
+                    delete window[callbackName];
+                    resolve({ errno, stdout: stdout || '', stderr: stderr || '' });
+                };
+                try {
+                    ksu.exec(cmd, '{}', callbackName);
+                } catch (e) {
+                    delete window[callbackName];
+                    reject(e);
+                }
+            });
+        }
+
+        function log(msg) {
+            const area = document.getElementById('logArea');
+            const ts = new Date().toLocaleTimeString('en-US', { hour12: false });
+            area.textContent += '\n[' + ts + '] ' + msg;
+            area.scrollTop = area.scrollHeight;
+        }
+
+        async function getprop(name) {
+            try {
+                const r = await exec('getprop ' + name);
+                return r.stdout.trim();
+            } catch (e) {
+                return '';
+            }
+        }
+
+        async function setProp(name, value) {
+            log('Setting ' + name + '=' + value);
+            try {
+                // resetprop for runtime, setprop for persistence where applicable
+                await exec('resetprop ' + name + ' ' + JSON.stringify(value));
+                log('OK: ' + name + ' = ' + value);
+                updateStatus();
+            } catch (e) {
+                log('ERROR setting ' + name + ': ' + e.message);
+            }
+        }
+
+        async function setFabricatedOverlay(name, resource, enabled) {
+            log('Setting fabricated overlay: ' + name + ' = ' + enabled);
+            try {
+                if (enabled) {
+                    // 0x12 = TYPE_INT_BOOLEAN, 0xFFFFFFFF = true
+                    await exec('cmd overlay fabricate --target android --name ' + name +
+                        ' android:bool/' + resource + ' 0x12 0xFFFFFFFF');
+                    await exec('cmd overlay enable --user current com.android.shell:' + name);
+                } else {
+                    await exec('cmd overlay disable --user current com.android.shell:' + name);
+                }
+                log('OK: ' + name + ' = ' + (enabled ? 'enabled' : 'disabled'));
+                await checkOverlayStatus();
+            } catch (e) {
+                log('ERROR: ' + e.message);
+            }
+        }
+
+        async function reapplyOverlays() {
+            log('Re-applying all fabricated overlays...');
+            try {
+                await exec('cmd overlay fabricate --target android --name MiracastEnablerWifiDisplay android:bool/config_enableWifiDisplay 0x12 0xFFFFFFFF');
+                await exec('cmd overlay fabricate --target android --name MiracastEnablerProtectedBuffers android:bool/config_wifiDisplaySupportsProtectedBuffers 0x12 0xFFFFFFFF');
+                await exec('cmd overlay enable --user current com.android.shell:MiracastEnablerWifiDisplay');
+                await exec('cmd overlay enable --user current com.android.shell:MiracastEnablerProtectedBuffers');
+                log('OK: overlays re-applied');
+                await checkOverlayStatus();
+            } catch (e) {
+                log('ERROR: ' + e.message);
+            }
+        }
+
+        async function checkOverlayStatus() {
+            try {
+                const r = await exec('cmd overlay list | grep -i miracast');
+                const lines = r.stdout.trim();
+                const desc = document.getElementById('overlayStatusDesc');
+                const wfdToggle = document.getElementById('toggleOverlayWfd');
+                const protToggle = document.getElementById('toggleOverlayProtected');
+
+                if (lines) {
+                    desc.textContent = lines.replace(/\n/g, ' | ');
+                    // [x] = enabled, [ ] = disabled
+                    wfdToggle.checked = lines.includes('[x] com.android.shell:MiracastEnablerWifiDisplay');
+                    protToggle.checked = lines.includes('[x] com.android.shell:MiracastEnablerProtectedBuffers');
+                } else {
+                    desc.textContent = 'No fabricated overlays found (will be created on next boot)';
+                    wfdToggle.checked = false;
+                    protToggle.checked = false;
+                }
+            } catch (e) {
+                document.getElementById('overlayStatusDesc').textContent = 'Error checking overlay status';
+            }
+        }
+
+        async function showModuleLog() {
+            try {
+                const r = await exec('cat /data/adb/modules/miracast-enabler/miracast.log 2>/dev/null || echo "No log file found"');
+                const area = document.getElementById('logArea');
+                area.textContent = '=== Module Boot Log ===\n' + r.stdout;
+                area.scrollTop = area.scrollHeight;
+            } catch (e) {
+                log('Could not read module log');
+            }
+        }
+
+        async function setFoldDisplay(mode) {
+            log('Setting fold display source: ' + mode);
+            try {
+                // Display IDs vary by device:
+                // rango (Pixel 10 Pro Fold): inner=0, outer=3
+                // comet (Pixel 9 Pro Fold): inner=0, outer=1
+                // felix (Pixel Fold 1): inner=0, outer=1
+                // We read the actual device to pick the right outer ID
+                const device = await getprop('ro.product.device');
+                const outerDisplayId = (device === 'rango') ? '3' : '1';
+
+                if (mode === 'inner') {
+                    await exec('resetprop persist.sys.wfd.display_id 0');
+                } else if (mode === 'outer') {
+                    await exec('resetprop persist.sys.wfd.display_id ' + outerDisplayId);
+                } else {
+                    await exec('resetprop --delete persist.sys.wfd.display_id');
+                }
+                log('OK: fold display = ' + mode + (mode === 'outer' ? ' (ID ' + outerDisplayId + ')' : ''));
+            } catch (e) {
+                log('ERROR: ' + e.message);
+            }
+        }
+
+        async function updateStatus() {
+            const wfd = await getprop('persist.debug.wfd.enable');
+            const banner = document.getElementById('statusBanner');
+            const text = document.getElementById('statusText');
+
+            if (wfd === '1') {
+                banner.className = 'status-banner active';
+                text.textContent = 'Miracast enabled';
+            } else {
+                banner.className = 'status-banner inactive';
+                text.textContent = 'Miracast disabled';
+            }
+        }
+
+        async function loadCurrentValues() {
+            const props = {
+                'persist.debug.wfd.enable': 'toggleWfd',
+                'persist.sys.wfd.nohdcp': 'toggleHdcp',
+                'persist.sys.wfd.virtual': 'toggleVirtual',
+            };
+
+            for (const [prop, id] of Object.entries(props)) {
+                const val = await getprop(prop);
+                document.getElementById(id).checked = (val === '1');
+            }
+
+            // P2P concurrency
+            const p2pIface = await getprop('wifi.direct.interface');
+            document.getElementById('toggleP2p').checked = (p2pIface === 'p2p-dev-wlan0');
+
+            // HWC virtual display — note: toggle is inverted (checked = force GPU = hwc_vds=0)
+            const hwcVds = await getprop('debug.sf.enable_hwc_vds');
+            document.getElementById('toggleComposition').checked = (hwcVds === '0');
+
+            // Resolution
+            const res = await getprop('persist.sys.wfd.resolution');
+            if (res) {
+                document.getElementById('selectResolution').value = res;
+            }
+
+            // WLAN HDCP
+            const wlanHdcp = await getprop('wlan.wfd.hdcp');
+            if (wlanHdcp) {
+                document.getElementById('selectWlanHdcp').value = wlanHdcp;
+            }
+
+            // Fold display
+            const displayId = await getprop('persist.sys.wfd.display_id');
+            if (displayId === '0') {
+                document.getElementById('selectFoldDisplay').value = 'inner';
+            } else if (displayId === '1') {
+                document.getElementById('selectFoldDisplay').value = 'outer';
+            }
+        }
+
+        async function loadDeviceInfo() {
+            const device = await getprop('ro.product.model');
+            const soc = await getprop('ro.soc.model');
+            const android = await getprop('ro.build.version.release');
+
+            document.getElementById('infoDevice').textContent = device || 'Unknown';
+            document.getElementById('infoSoc').textContent = soc || 'Unknown';
+            document.getElementById('infoAndroid').textContent = android || 'Unknown';
+
+            // Detect Wi-Fi chip from loaded kernel modules
+            try {
+                const r = await exec('ls /sys/module/ | grep -iE "^(bcmdhd|qca|wcn|wlan|ath|mt76|iwl)" | head -1');
+                const chip = r.stdout.trim();
+                document.getElementById('infoWifi').textContent = chip || 'Unknown';
+            } catch (e) {
+                document.getElementById('infoWifi').textContent = 'Unknown';
+            }
+        }
+
+        async function refreshAll() {
+            log('Refreshing...');
+            await loadCurrentValues();
+            await updateStatus();
+            await loadDeviceInfo();
+            await checkOverlayStatus();
+            log('Refresh complete');
+        }
+
+        // Init
+        (async function init() {
+            try {
+                await refreshAll();
+                log('Ready');
+            } catch (e) {
+                log('Init error: ' + e.message);
+                document.getElementById('statusBanner').className = 'status-banner loading';
+                document.getElementById('statusText').textContent = 'Error reading device state';
+            }
+        })();
+    </script>
+</body>
+</html>